$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402671.roa File: AS402671.roa (raw, json) Hash identifier: qqiO9ToA+VHcTgXnDn/o1XMe2jXsq7QDpM5yZ/IQcf4= Subject key identifier: 40:19:0D:74:47:5C:85:1D:D0:5C:35:A5:34:64:96:3D:9E:E6:0E:8C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 69EFCF199834481F16E56B3D43E4EF58E8924C8B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402671.roa Signing time: Mon 26 Oct 2026 16:03:22 +0000 ROA not before: Mon 26 Oct 2026 15:58:22 +0000 ROA not after: Mon 25 Oct 2027 16:03:22 +0000 asID: 402671 IP address blocks: 179.253.51.0/24 maxlen: 24 179.254.205.0/24 maxlen: 24 187.15.208.0/24 maxlen: 24 187.55.33.0/24 maxlen: 24 189.30.72.0/24 maxlen: 24 189.30.92.0/24 maxlen: 24 189.30.118.0/24 maxlen: 24 189.30.120.0/24 maxlen: 24 191.0.91.0/24 maxlen: 24 200.180.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 22:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ef:cf:19:98:34:48:1f:16:e5:6b:3d:43:e4:ef:58:e8:92:4c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 26 15:58:22 2026 GMT Not After : Oct 25 16:03:22 2027 GMT Subject: CN=40190D74475C851DD05C35A53464963D9EE60E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:94:dd:f1:7a:6f:3b:fe:80:7e:74:75:06: d7:5d:f4:ae:0e:36:e4:ef:34:20:50:a6:1f:6d:fd: 54:8c:12:94:be:2e:b4:9d:0b:21:7a:6a:08:98:4e: 76:dd:ad:d1:d9:e1:40:15:32:46:10:39:b2:9b:1c: 1e:76:7b:ef:03:b0:23:fc:b3:e9:a9:0f:8d:3e:d5: 03:9b:4b:7c:7a:62:b3:46:b2:94:ab:b7:f3:90:53: 40:ff:e3:81:cd:26:1e:5b:55:ca:80:0b:b0:9b:61: 3b:0e:5d:99:78:6b:08:9f:8e:2c:27:fd:87:d0:57: c8:dd:70:d1:83:45:34:c3:a1:41:cd:8b:8f:48:af: 0e:79:28:e2:42:cb:bd:33:d0:e9:c1:7c:cd:8d:27: ed:9c:8e:36:53:0c:fa:f8:94:69:cf:23:b1:26:61: 2d:e1:9b:df:76:83:7e:a0:f6:3a:83:ff:a1:d0:bb: 7d:8e:2d:ce:5b:a7:cf:9b:07:cf:6d:46:74:d4:b4: 7f:f5:eb:4d:4c:a1:bd:c6:00:be:85:b1:43:a2:2a: c5:95:b0:8b:38:c6:2a:94:63:bc:b4:d8:f9:23:f0: 2e:a8:46:73:a2:1a:23:b4:12:e7:4e:7f:de:5c:0c: 7c:07:a4:48:69:7f:4f:51:b3:af:6d:ac:28:a8:de: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:19:0D:74:47:5C:85:1D:D0:5C:35:A5:34:64:96:3D:9E:E6:0E:8C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402671.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.253.51.0/24 179.254.205.0/24 187.15.208.0/24 187.55.33.0/24 189.30.72.0/24 189.30.92.0/24 189.30.118.0/24 189.30.120.0/24 191.0.91.0/24 200.180.188.0/24 Signature Algorithm: sha256WithRSAEncryption 51:b5:ba:06:20:fd:48:31:b9:3e:43:53:29:74:c4:0d:3b:b6: bb:92:d7:31:19:1e:88:ea:53:ea:55:eb:88:68:12:97:a1:b0: 6b:22:eb:2e:f2:fb:b3:97:a4:8b:ce:3d:71:7a:7f:33:4d:d3: d9:1a:ab:31:5d:26:1e:5d:d6:a3:f3:46:81:f8:d3:fb:14:1e: 35:2e:eb:c0:16:63:cc:de:f9:43:85:f0:24:b4:74:1d:4a:3e: 76:34:6c:de:ea:82:00:90:0b:6c:0e:6d:af:30:2c:47:22:61: 91:ce:e7:cb:82:94:2c:6a:80:08:10:92:11:52:35:98:9c:7c: d3:ad:48:e9:3d:e5:6c:0b:6a:05:92:c6:88:5c:10:1c:c7:d1: 8d:72:00:75:d1:56:5b:99:f3:ac:a2:2e:fb:65:fc:85:70:6b: a8:73:e5:0e:4c:3d:47:36:f6:a3:77:dd:1b:3d:20:dd:a8:2b: 49:aa:04:dd:b2:d5:18:fa:a1:ac:fe:a6:3a:ff:cc:58:a9:4b: 20:d1:7b:5a:65:7f:fb:d7:f7:17:4d:41:5d:b3:20:74:c7:77: 92:d2:c4:38:cc:af:a2:eb:0f:23:1a:ee:9c:fa:98:a2:13:85: e9:84:6e:13:8f:20:fd:29:ed:43:69:99:ea:b6:74:aa:f6:e0: ae:54:28:b0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUae/PGZg0SB8W5Ws9Q+TvWOiSTIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjYxNTU4MjJaFw0yNzEwMjUxNjAzMjJaMDMxMTAvBgNV BAMTKDQwMTkwRDc0NDc1Qzg1MUREMDVDMzVBNTM0NjQ5NjNEOUVFNjBFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gZTd8XpvO/6AfnR1Btdd9K4O NuTvNCBQph9t/VSMEpS+LrSdCyF6agiYTnbdrdHZ4UAVMkYQObKbHB52e+8DsCP8 s+mpD40+1QObS3x6YrNGspSrt/OQU0D/44HNJh5bVcqAC7CbYTsOXZl4awifjiwn /YfQV8jdcNGDRTTDoUHNi49Irw55KOJCy70z0OnBfM2NJ+2cjjZTDPr4lGnPI7Em YS3hm992g36g9jqD/6HQu32OLc5bp8+bB89tRnTUtH/1601Mob3GAL6FsUOiKsWV sIs4xiqUY7y02Pkj8C6oRnOiGiO0EudOf95cDHwHpEhpf09Rs69trCio3vUfAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUQBkNdEdchR3QXDWlNGSWPZ7mDowwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI2NzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVQYIKwYBBQUHAQcBAf8ERjBEMEIE AgABMDwDBACz/TMDBACz/s0DBAC7D9ADBAC7NyEDBAC9HkgDBAC9HlwDBAC9HnYD BAC9HngDBAC/AFsDBADItLwwDQYJKoZIhvcNAQELBQADggEBAFG1ugYg/UgxuT5D Uyl0xA07truS1zEZHojqU+pV64hoEpehsGsi6y7y+7OXpIvOPXF6fzNN09kaqzFd Jh5d1qPzRoH40/sUHjUu68AWY8ze+UOF8CS0dB1KPnY0bN7qggCQC2wOba8wLEci YZHO58uClCxqgAgQkhFSNZicfNOtSOk95WwLagWSxohcEBzH0Y1yAHXRVluZ86yi Lvtl/IVwa6hz5Q5MPUc29qN33Rs9IN2oK0mqBN2y1Rj6oaz+pjr/zFipSyDRe1pl f/vX9xdNQV2zIHTHd5LSxDjMr6LrDyMa7pz6mKIThemEbhOPIP0p7UNpmeq2dKr2 4K5UKLA= -----END CERTIFICATE-----Generated at Tue Oct 27 14:53:43 2026 by rpki-client